HackingSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedPIIFINANCIAL_ACCOUNTLowContained
Smithfield Foods
bd_949fe07294db3e72 · schema v1 · pii pii-v1
Full breach record for Smithfield Foods →Smithfield Specialty Foods Group LLC reported a data breach affecting its third-party web hosting provider, CommerceV3, Inc. Unauthorized access occurred between November 24, 2021, and December 14, 2022, impacting customer data from smithfieldmarketplace.com and thepeanutshop.com. Smithfield was notified on June 7, 2023. Approximately 209 New Hampshire residents were affected. Smithfield suspended the affected hosting service and provided credit monitoring services to affected individuals.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ca375fb341260f4bMontana State AGfiled 2023-06-29(4d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/smithfield-specialty-foods-group-20230703.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 3, 2023
- Raw hash
- 554baa1cf506bc1c742fa9655b047a37988e8f73a7358f1d79b8398a9a53fee9
Reporting entity
- Name
- Smithfield Foodsnorm: smithfield foods
- Domain
- smithfieldfoods.com
Victim entity
- Name
- Smithfield Foodsnorm: smithfield foods
- Domain
- smithfieldfoods.com
Incident
- Discovered
- Jun 7, 2023
- Materiality determined
- —
- Notification sent
- Jun 29, 2023
- Affected individuals
- 209
- Data types
- PIIFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
- Third party
- via CommerceV3, Inc.
- Initial access
- supply_chain
Compliance
- Time to disclose
- 26 days(26 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.